Conda-package-handling

Latest version: v2.4.0

Safety actively analyzes 706267 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 7

2.0.0

Enhancements

* Remove progress bars.
* Based on conda-package-streaming instead of libarchive.
* Requires the `python-zstandard` (`zstandard`) library.
* Threadsafe `extract()` function.
* More efficient `.conda` handling.

Deprecations

* Remove broken `verify` subcommand.
* Remove support for `binsort` (was supposed to help with `tar.bz2`
compression). (Use `.conda` instead.)

Docs

* Add sphinx documentation.

Other

* Reformat entire codebase with `black`, `isort`. (132)

Contributors

* conda-bot
* dholth
* jezdez
* kenodegard
* mariusvniekerk

1.9.0

Enhancements

* Support setting the zstd compression level on the cli. (114)

Bug fixes

* Include tested fix for "``info/`` sorts first in ``.tar.bz2``" feature, useful
for streaming ``.tar.bz2``. (102)
* Fix extracting ``.conda`` given as relative path. (116)
* Gracefully handle missing subcommands. (105)

Contributors

* conda-bot
* jezdez
* dholth
* kenodegard made their first contribution in 112
* mariusvniekerk made their first contribution in 114

1.8.1

Bug fixes

* Don't drop empty directories that happen to be prefixes of something else (99)

Contributors

* tobijk
* conda-bot
* chenghlee

1.8.0

Enhancements

* Compute package hashes in threads. (83)

Bug fixes

* Fix running from a read-only working directory (44)
* Fix symlinks to directories being incorrectly placed in the ``info`` tarball
when transmuting ``.tar.bz2``- to ``.conda``-format packages (84)
* No longer generate emtpy metadata.json in v2 packages (88)
* Fix for TypeError in tarball.py. (86)

Deprecations

* Remove Python 2 support.

Other

* Added project board, issue staleness, thread locking and label automation
using GitHub action workflows to improve maintenance of GitHub project.

More information can be found in the infra repo: https://github.com/conda/infra

* Removed unused continuous integration platform config files.

Contributors

* dholth
* conda-bot
* chenghlee
* analog-cbarber
* chrisburr
* vz-x
* jezdez

1.7.3

Enhancements

* Python tar extraction now used as a fallback if libarchive fails

Bug fixes

* Fix binsort's mangling of symlinks
* Fix 71, larger directories fail to extract using libarchive
* When testing that exceptions are raised or archives containing abs paths, first check that such a "broken" archive was created during test setup... otherwise skip the test.
* api.create now raises an error correctly if archive creation failed or extension is not supported.
* Travis CI issue now resolved, mock added as dependency for conda test environments and system dependencies
* Fixed bug where extract parser cli failed due to not having ``out_folder`` attribute.

Contributors

* mingwandroid
* leej3
* beckermr
* seemethere

1.7.2

Enhancements

* add --force to transmute

Bug fixes

* Do not report symlinks as missing files
* Fixes for --process and --out-folder 68
* --out-folder: Normalise, expand user-ify and ensure it ends with os.sep

Contributors

* mingwandroid
* nehaljwani

Page 2 of 7

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.